update formatting for new markdown rules

Something got updated in the docker container that has some new rules on
document formatting.

Change-Id: I5b8d3cdc04458845a22d1e898dfbbd7538f68f69
Signed-of

update formatting for new markdown rules

Something got updated in the docker container that has some new rules on
document formatting.

Change-Id: I5b8d3cdc04458845a22d1e898dfbbd7538f68f69
Signed-off-by: Andrew Geissler <geissonator@yahoo.com>

show more ...

TLS-configuration: Fix Content-Type spelling

Spelled Content-Type:
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Type

Without this change going to think it is a different header

TLS-configuration: Fix Content-Type spelling

Spelled Content-Type:
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Type

Without this change going to think it is a different header.

```
> ContentType:application/json
> Content-Length: 48
> Content-Type: application/x-www-form-urlencoded
```

Change-Id: Iceba2b53be5ec8ce1f0058d133af6906a9687b6a
Signed-off-by: Gunnar Mills <gmills@us.ibm.com>

show more ...

TLS configuration: Add Content-Type

Redfish and HTTP rule. Better if correct everywhere.

bmcweb is attempting to validate content-type header,
https://gerrit.openbmc.org/c/openbmc/bmcweb/+/59941.

TLS configuration: Add Content-Type

Redfish and HTTP rule. Better if correct everywhere.

bmcweb is attempting to validate content-type header,
https://gerrit.openbmc.org/c/openbmc/bmcweb/+/59941.

Change-Id: Ic51d9308e11c34771d1e2298cebc488951bc6dc3
Signed-off-by: Gunnar Mills <gmills@us.ibm.com>

show more ...

prettier: re-format

Prettier is enabled in openbmc-build-scripts on Markdown, JSON, and YAML
files to have consistent formatting for these file types. Re-run the
formatter on the whole repository.

prettier: re-format

Prettier is enabled in openbmc-build-scripts on Markdown, JSON, and YAML
files to have consistent formatting for these file types. Re-run the
formatter on the whole repository.

Change-Id: I35ec9c19ae581e4dd00b515c1bba3a9c1862eeb1
Signed-off-by: Patrick Williams <patrick@stwcx.xyz>

show more ...

Add maintainer flow to create security advisories

This enhances the security response guidelines with process steps for
repo maintainers to create new security advisories, and provides
guidance for

Add maintainer flow to create security advisories

This enhances the security response guidelines with process steps for
repo maintainers to create new security advisories, and provides
guidance for what to put into the advisory.

Signed-off-by: Joseph Reynolds <joseph-reynolds@charter.net>
Change-Id: Icc3f737d0d845d651eaf70853ed55529dacf7a93

show more ...

Use github security advisories

This updates the OpenBMC security vulnerability reporting process
to use GitHub advisories. Each repository owner/maintainer is
responsible for their security problem

Use github security advisories

This updates the OpenBMC security vulnerability reporting process
to use GitHub advisories. Each repository owner/maintainer is
responsible for their security problems, and the security response
team advises and creates CVEs.

Signed-off-by: Joseph Reynolds <joseph-reynolds@charter.net>
Change-Id: Ic9e169b4c94b625c9af838ef0c03c78fa0300031

show more ...

security: Replace phosphor-webui with webui-vue

webui-vue is a modern replacement for phosphor-webui.
Overall the community has already moved to webui-vue.
Replace references to phosphor-webui with

security: Replace phosphor-webui with webui-vue

webui-vue is a modern replacement for phosphor-webui.
Overall the community has already moved to webui-vue.
Replace references to phosphor-webui with webui-vue.

Some reasons why webui-vue is preferred over phosphor-webui:
phosphor-webui uses AngularJS which has gone End of Life.
phosphor-webui uses the REST D-BUS API which has been disabled by
default.
webui-vue has additional features.

Change-Id: Ieb027814e226c9d7db8edbf2ca64da26e697fd16
Signed-off-by: Gunnar Mills <gmills@us.ibm.com>

show more ...

TLS-configuration: fix typo

Reported on openbmc/docs#59. Author hasn't moved to Gerrit in over 6
months and it is a trivial change.

Signed-off-by: Patrick Williams <patrick@stwcx.xyz>
Change-Id: I

TLS-configuration: fix typo

Reported on openbmc/docs#59. Author hasn't moved to Gerrit in over 6
months and it is a trivial change.

Signed-off-by: Patrick Williams <patrick@stwcx.xyz>
Change-Id: I0550c7414539d1e305fa309824f83efb7adff54d

show more ...

Security response team membership guidelines

This better articulates the guidelines for who should be on the
security response team and clarifies that membership is based on
participating organizati

Security response team membership guidelines

This better articulates the guidelines for who should be on the
security response team and clarifies that membership is based on
participating organizations.

Signed-off-by: Joseph Reynolds <joseph-reynolds@charter.net>
Change-Id: Ia331bf1dec4e75b86d448561c82f4096c9a17c12

show more ...

Adds package requirements to Common mistakes

I made this mistake, and would like to update the documentation
accordingly.

Signed-off-by: John Edward Broadbent <jebr@google.com>
Change-Id: Ic0c477c6

Adds package requirements to Common mistakes

I made this mistake, and would like to update the documentation
accordingly.

Signed-off-by: John Edward Broadbent <jebr@google.com>
Change-Id: Ic0c477c62881a04ef731a5dc3827cfabad84cd32

show more ...

Adding TLS authentication guidebook.

This document is a guidebook for users that want to enable
OpenBMC TLS authentication. It guides user step-by-step
with option to copy-paste example commands, st

Adding TLS authentication guidebook.

This document is a guidebook for users that want to enable
OpenBMC TLS authentication. It guides user step-by-step
with option to copy-paste example commands, starting from
certificate creation,through TLS enabling and ending on TLS
authentication verification.

Signed-off-by: Zbigniew Kurzynski <zbigniew.kurzynski@intel.com>
Change-Id: I1ccbeb8e7ef77eb102a0b4ea771de092fbad2b5b

show more ...

architecture: rename files to dashes instead of underscores

Signed-off-by: Patrick Williams <patrick@stwcx.xyz>
Change-Id: I2a29242abb5b900a22e081c796f8a44273fd543f

network-security headline typo

Fix misspelled acronynm in headline.

A review in gedit spell check did not reveal other obvious typos.

Change-Id: I425d18f28697b758e6b01cedaa6f8e9c3b6ca6dd
Signed-of

network-security headline typo

Fix misspelled acronynm in headline.

A review in gedit spell check did not reveal other obvious typos.

Change-Id: I425d18f28697b758e6b01cedaa6f8e9c3b6ca6dd
Signed-off-by: Milton Miller <miltonm@us.ibm.com>

show more ...

Improve security response docs

This improves the security response team docs

This helps set submitter expectations and controls behavior.

This clarifies that the decision to spread information abo

Improve security response docs

This improves the security response team docs

This helps set submitter expectations and controls behavior.

This clarifies that the decision to spread information about reported
security vulnerabilities should be coordinated by security response
team members, and sets critera for that decision.

This corrects spelling errors.

This calls for an email notification when a new security
advisory is created.

Change-Id: I48edb4e819beadf41da2011f63eb9a2ec3dd4ec9
Signed-off-by: Joseph Reynolds <joseph.reynolds1@ibm.com>

show more ...

Move user_management.md under architecture/

Updated phosphor-dbus-interface reference here:
https://gerrit.openbmc-project.xyz/c/openbmc/phosphor-dbus-interfaces/+/26261

Change-Id: I3e346c2ee17d762

Move user_management.md under architecture/

Updated phosphor-dbus-interface reference here:
https://gerrit.openbmc-project.xyz/c/openbmc/phosphor-dbus-interfaces/+/26261

Change-Id: I3e346c2ee17d762eb3d20ddb27dc89927d11da38
Signed-off-by: Gunnar Mills <gmills@us.ibm.com>

show more ...

Move ipmi-architecture.md under architecture/

Change-Id: I99d105d61883a50c34de8530ff03b4031624f12b
Signed-off-by: Gunnar Mills <gmills@us.ibm.com>

Docs: Document network security considerations

This documents some OpenBMC network security considerations which aim to:
describe network services provided by OpenBMC-based systems,
some threats

Docs: Document network security considerations

This documents some OpenBMC network security considerations which aim to:
describe network services provided by OpenBMC-based systems,
some threats to the BMC from its network interfaces, and how OpenBMC
addresses each threat.

Use cases are for new developers, testers, security folks, and projects
interested in using OpenBMC.

Change-Id: Ie69ab15e395492c9c8ec8f6d0765f0f73aac4a28
Signed-off-by: Joseph Reynolds <joseph.reynolds1@ibm.com>

show more ...

security-response-team: Capitalize Gerrit

Change-Id: I30cb36b2d61f0e57cffeaebaca48623e9b1ba56d
Signed-off-by: Gunnar Mills <gmills@us.ibm.com>

Add how to handle private security vulnerabilities

Adds two new documents:
- "How to report a security vulnerability" says how to privately
report a security vulnerability with the intention of g

Add how to handle private security vulnerabilities

Adds two new documents:
- "How to report a security vulnerability" says how to privately
report a security vulnerability with the intention of getting
a fix before public disclosure.
- "Security response team guidelines" is for the security response
team and community members who are responding to privately
disclosed problems and working to provide a fix.

Change-Id: I83475bd4bfa014106ab5c3b50ad81e3488d06ba3
Signed-off-by: Joseph Reynolds <jrey@us.ibm.com>

show more ...

Create security vulnerability reporting mechanism

This documents the process to privately report OpenBMC
security vulnerabilities with the intention of giving
time to the project to fix the problem

Create security vulnerability reporting mechanism

This documents the process to privately report OpenBMC
security vulnerabilities with the intention of giving
time to the project to fix the problem before public
disclosure.

This first commit establishes the project's scope.
The next commit:
- provides guidelines to the OpenBMC security response team as it
works to address the security issues and disclose publicly
- establishes the "How to report security vulnerabilities" web
page to tell problem submitters what to include in their report
and what to expect from the OpenBMC security response team

Change-Id: Ib90070f998a815ba3f4430c7eb6ff84b3934e012
Signed-off-by: Joseph Reynolds <jrey@us.ibm.com>

show more ...